acl_common.c revision fa9e4066f08beec538e775443c5be79dd423fcab
fa9e4066f08beec538e775443c5be79dd423fcabahrens * CDDL HEADER START
fa9e4066f08beec538e775443c5be79dd423fcabahrens * The contents of this file are subject to the terms of the
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Common Development and Distribution License, Version 1.0 only
fa9e4066f08beec538e775443c5be79dd423fcabahrens * (the "License"). You may not use this file except in compliance
fa9e4066f08beec538e775443c5be79dd423fcabahrens * with the License.
fa9e4066f08beec538e775443c5be79dd423fcabahrens * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
fa9e4066f08beec538e775443c5be79dd423fcabahrens * See the License for the specific language governing permissions
fa9e4066f08beec538e775443c5be79dd423fcabahrens * and limitations under the License.
fa9e4066f08beec538e775443c5be79dd423fcabahrens * When distributing Covered Code, include this CDDL HEADER in each
fa9e4066f08beec538e775443c5be79dd423fcabahrens * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
fa9e4066f08beec538e775443c5be79dd423fcabahrens * If applicable, add the following below this CDDL HEADER, with the
fa9e4066f08beec538e775443c5be79dd423fcabahrens * fields enclosed by brackets "[]" replaced with your own identifying
fa9e4066f08beec538e775443c5be79dd423fcabahrens * information: Portions Copyright [yyyy] [name of copyright owner]
fa9e4066f08beec538e775443c5be79dd423fcabahrens * CDDL HEADER END
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Copyright 2005 Sun Microsystems, Inc. All rights reserved.
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Use is subject to license terms.
fa9e4066f08beec538e775443c5be79dd423fcabahrens#pragma ident "%Z%%M% %I% %E% SMI"
fa9e4066f08beec538e775443c5be79dd423fcabahrens {-1, ACE_WRITE_ACL|ACE_WRITE_OWNER|ACE_WRITE_ATTRIBUTES|
fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_WRITE_NAMED_ATTRS, ACE_OWNER, ACE_ACCESS_ALLOWED_ACE_TYPE},
fa9e4066f08beec538e775443c5be79dd423fcabahrens {-1, 0, ACE_GROUP|ACE_IDENTIFIER_GROUP, ACE_ACCESS_DENIED_ACE_TYPE},
fa9e4066f08beec538e775443c5be79dd423fcabahrens {-1, 0, ACE_GROUP|ACE_IDENTIFIER_GROUP, ACE_ACCESS_ALLOWED_ACE_TYPE},
fa9e4066f08beec538e775443c5be79dd423fcabahrens {-1, ACE_WRITE_ACL|ACE_WRITE_OWNER| ACE_WRITE_ATTRIBUTES|
fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_WRITE_NAMED_ATTRS, ACE_EVERYONE, ACE_ACCESS_DENIED_ACE_TYPE},
fa9e4066f08beec538e775443c5be79dd423fcabahrens {-1, ACE_READ_ACL|ACE_READ_ATTRIBUTES|ACE_READ_NAMED_ATTRS|
fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_SYNCHRONIZE, ACE_EVERYONE, ACE_ACCESS_ALLOWED_ACE_TYPE}
fa9e4066f08beec538e775443c5be79dd423fcabahrens * ace_trivial:
fa9e4066f08beec538e775443c5be79dd423fcabahrens * determine whether an ace_t acl is trivial
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Trivialness implys that the acl is composed of only
fa9e4066f08beec538e775443c5be79dd423fcabahrens * owner, group, everyone entries. ACL can't
fa9e4066f08beec538e775443c5be79dd423fcabahrens * have read_acl denied, and write_owner/write_acl/write_attributes
fa9e4066f08beec538e775443c5be79dd423fcabahrens * can only be owner@ entry.
fa9e4066f08beec538e775443c5be79dd423fcabahrens for (i = 0; i != aclcnt; i++) {
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_DIRECTORY_INHERIT_ACE|ACE_NO_PROPAGATE_INHERIT_ACE|
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Special check for some special bits
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Don't allow anybody to deny reading an ACL
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Allow on owner@ to allow
fa9e4066f08beec538e775443c5be79dd423fcabahrens (!(acep[i].a_flags & ACE_OWNER) && (acep[i].a_access_mask &
fa9e4066f08beec538e775443c5be79dd423fcabahrens (ACE_WRITE_OWNER|ACE_WRITE_ACL|ACE_WRITE_ATTRIBUTES))))
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens if ((owner_seen == 0) || (group_seen == 0) || (everyone_seen == 0))
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (0);
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Generic shellsort, from K&R (1st ed, p 58.), somewhat modified.
fa9e4066f08beec538e775443c5be79dd423fcabahrens * v = Ptr to array/vector of objs
fa9e4066f08beec538e775443c5be79dd423fcabahrens * n = # objs in the array
fa9e4066f08beec538e775443c5be79dd423fcabahrens * s = size of each obj (must be multiples of a word size)
fa9e4066f08beec538e775443c5be79dd423fcabahrens * f = ptr to function to compare two objs
fa9e4066f08beec538e775443c5be79dd423fcabahrens * returns (-1 = less than, 0 = equal, 1 = greater than
fa9e4066f08beec538e775443c5be79dd423fcabahrens int g, i, j, ii;
fa9e4066f08beec538e775443c5be79dd423fcabahrens unsigned int tmp;
fa9e4066f08beec538e775443c5be79dd423fcabahrens /* No work to do */
fa9e4066f08beec538e775443c5be79dd423fcabahrens /* Sanity check on arguments */
fa9e4066f08beec538e775443c5be79dd423fcabahrens for (i = g; i < n; i++) {
fa9e4066f08beec538e775443c5be79dd423fcabahrens for (j = i - g; j >= 0 &&
fa9e4066f08beec538e775443c5be79dd423fcabahrens (*f)(v + j * s, v + (j + g) * s) == 1;
fa9e4066f08beec538e775443c5be79dd423fcabahrens p1 = (void *)(v + j * s);
fa9e4066f08beec538e775443c5be79dd423fcabahrens p2 = (void *)(v + (j + g) * s);
fa9e4066f08beec538e775443c5be79dd423fcabahrens * Compare two acls, all fields. Returns:
fa9e4066f08beec538e775443c5be79dd423fcabahrens * -1 (less than)
fa9e4066f08beec538e775443c5be79dd423fcabahrens * 0 (equal)
fa9e4066f08beec538e775443c5be79dd423fcabahrens * +1 (greater than)
fa9e4066f08beec538e775443c5be79dd423fcabahrenscmp2acls(void *a, void *b)
fa9e4066f08beec538e775443c5be79dd423fcabahrens /* Compare types */
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (-1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens /* Equal types; compare id's */
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (-1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens /* Equal ids; compare perms */
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (-1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (1);
fa9e4066f08beec538e775443c5be79dd423fcabahrens /* Totally equal */
fa9e4066f08beec538e775443c5be79dd423fcabahrens return (0);